A cloud-oriented cross-domain security architecture

Abstract

The Monterey Security Architecture addresses the need to share high-value data across multiple domains of different classification levels while enforcing information flow policies. The architecture allows users with different security authorizations to securely collaborate and exchange information using commodity computers and familiar commercial client software that generally lack the prerequisite assurance and functional security protections. MYSEA seeks to meet two compelling requirements, often assumed to be at odds: enforcing critical, mandatory security policies, and allowing access and collaboration in a familiar work environment. Recent additions to the MYSEA design expand the architecture to support a cloud of cross-domain services, hosted within a federation of multilevel secure (MLS) MYSEA servers. The MYSEA cloud supports single-sign on, service replication, and network-layer quality of security service. This new crossdomain, distributed architecture follows the consumption and delivery model for cloud services, while maintaining the federated control model necessary to support and protect crossdomain collaboration within the enterprise. The resulting architecture shows the feasibility of high-assurance, cross-domain services hosted within a community cloud suitable for interagency, or joint, collaboration. This paper summarizes the MYSEA architecture and discusses MYSEA's approach to provide an MLS-constrained cloud computing environment.

Cryptographic Protocols for Secure Cloud Computing

“…The IPsec protocol version used here for cloud computing purposes will consist of a type known as MYSEA. In general terms, the MYSEA IPSec protocol for cryptographic encrypted cloud services has the function of promoting scalability, agility, sharing of resources and collaboration on the cloud platform [6]. The cloud platform can in this case come in the form of private ones, hybrid or public ones.…”

Cross-Domain Fine-Grained Data Usage Control Service for Industrial Wireless Sensor Networks

“…In fact, there are many existing studies that have focused on the area of cross-domain security. The study in [19] is based on the basic idea of a cloud service consumption and delivery method, and across-domain, distributed architecture scheme was provided. Enforced traditional mandatory access control also attracted much attention, such as the Bell-LaPadula model, which is used in [20].…”

A Newer Secure Communication, File Encryption and User Identification based Cloud Security Architecture

“…So, only tried and become successful to hack one of the servers can give the hacker all information about the file, which is not desirable. Some other models and secured architecture are proposed for ensuring security in cloud computing environment [18,19]. Though these model ensures secured communication between users and servers, but these models doesn't encrypt the loaded information.…”